Jnspector  (general 

United  States 
Department  of  Defense 


Oversight  Review 


December  5,  2011 


Report  on  Quality  Control  Review  of  Grant 
Thornton,  LLP  FY  2009  Single  Audit  of 
Concurrent  Technologies  Corporation 


Report  No.  DODIG-2012-029 


Report  Documentation  Page 

Form  Approved 

OMB  No.  0704-0188 

Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 

VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 

1.  REPORT  DATE 

05  DEC  2011  2' REPORT  TYPE 

3.  DATES  COVERED 

00-00-2011  to  00-00-2011 

4.  TITLE  AND  SUBTITLE 

Report  on  Quality  Control  Review  of  Grant  Thornton,  LLP  FY  2009 

Single  Audit  of  Concurrent  Technologies  Corporation 

5a.  CONTRACT  NUMBER 

5b.  GRANT  NUMBER 

5c.  PROGRAM  ELEMENT  NUMBER 

6.  AUTHOR(S) 

5d.  PROJECT  NUMBER 

5e.  TASK  NUMBER 

5f.  WORK  UNIT  NUMBER 

7.  PERFORMING  ORGANIZATION  NAME(S)  AND  ADDRESS(ES) 

Department  of  Defense  Office  of  Inspector  General, 4800  Mark  Center 
Drive,  Alexandria,  Y  A, 22350 

8.  PERFORMING  ORGANIZATION 

REPORT  NUMBER 

9.  SPONSORING/MONITORING  AGENCY  NAME(S)  AND  ADDRESS(ES) 

10.  SPONSOR/MONITOR'S  ACRONYM(S) 

11.  SPONSOR/MONITOR'S  REPORT 
NUMBER(S) 

12.  DISTRIBUTION/AVAILABILITY  STATEMENT 

Approved  for  public  release;  distribution  unlimited 

13.  SUPPLEMENTARY  NOTES 

14.  ABSTRACT 

15.  SUBJECT  TERMS 

16.  SECURITY  CLASSIFICATION  OF:  17.  LIMITATION  OF 

_ _ _  ABSTRACT 

18.  NUMBER  19a.  NAME  OF 

OF  PAGES  RESPONSIBLE  PERSON 

a.  REPORT  b.  ABSTRACT  c.  THIS  PAGE  Same  OS 

unclassified  unclassified  unclassified  Report  (SAR) 

16 

Standard  Form  298  (Rev.  8-98) 

Prescribed  by  ANSI  Std  Z39-18 


Additional  Information  and  Copies 

The  Department  of  Defense,  Office  of  the  Assistant  Inspector  General  for  Audit  Policy 
and  Oversight,  prepared  this  report.  To  obtain  additional  copies  of  the  final  report,  visit 
www.dodig.mil/audit/reports  or  contact  the  Office  of  the  Assistant  Inspector  General  for 
Audit  Policy  and  Oversight  at  (703)  604-8760  or  fax  (703)  604-8982. 

Suggestions  for  Reviews 

To  suggest  or  request  reviews,  contact  the  Office  of  the  Assistant  Inspector  General  for 
Audit  Policy  and  Oversight  by  phone  (703)  604-8760  (DSN  664-8760),  by  fax  (703) 
604-8982,  or  by  mail: 


OAIG-APO 

Department  of  Defense  Inspector  General 
4800  Mark  Center  Drive,  (Room  1 1D28) 
Alexandria,  VA  22350-1500 


DEPARTMENT  OF  DEFENSE 


hr\+J 

i  i  i 


To  report  fraud,  waste,  mismanagement,  and  abuse  of  authority. 

Send  written  complaints  lo:  Defense  Hotline,  The  Pentagon,  Washington,  DC  20301-1900 
Phone-  800.424.9098  e-mail:  hotlinefododiq.mll  www.dodig.mil/hotline 


INSPECTOR  GENERAL 

DEPARTMENT  OF  DEFENSE 

4800  MARK  CENTER  DRIVE 
ALEXANDRIA,  VIRGINIA  22350-1500 


DEC  -  5  2011 


Board  of  Directors 

Concurrent  Technologies  Corporation 

Chief  Financial  Officer  and  Treasurer 
Concurrent  Technologies  Corporation 

Audit  Partner 
Grant  Thornton,  LLP 

SUBJECT:  Report  on  Quality  Control  Review  of  Grant  Thornton,  LLP  FY  2009  Single 
Audit  of  Concurrent  Technologies  Corporation 
(Report  No.  DODIG-20 12-029) 

We  are  providing  this  report  for  your  information  and  use.  We  considered  management 
comments  on  a  draft  of  this  report  when  preparing  the  final  report.  As  the  cognizant 
federal  agency  for  Concurrent  Technologies  Corporation  (Concurrent  Technologies),  we 
performed  a  review  of  the  Grant  Thornton,  LLP  single  audit  and  supporting  working 
papers  for  fiscal  year  ended  June  30,  2009.  The  purpose  of  our  review  was  to  determine 
whether  the  audit  was  conducted  in  accordance  with  auditing  standards'  and  the  auditing 
and  reporting  requirements  of  Office  of  Management  and  Budget  Circular  A-133, 
“Audits  of  States,  Local  Governments,  and  Non-Profit  Organizations,”  (Circular  A-133). 
Appendix  A  contains  additional  background,  scope  and  methodology  for  the  review  and 
Appendix  B  lists  the  applicable  compliance  requirements  Grant  Thornton  considered 
direct  and  material  to  the  FY  2009  single  audit. 

Background.  Concurrent  Technologies  is  an  independent,  nonprofit,  applied  scientific 
research  and  development  professional  services  organization  headquartered  in  Johnston, 
Pennsylvania.  Concurrent  Technologies  expended  $229.5  million  in  federal  awards  for 
the  fiscal  year  ended  June  30,  2009  under  one  federal  program,  the  research  and 
development  cluster.  Of  the  $229.5  million,  $207.4  million  was  expended  for 
Department  of  Defense  programs. 

Review  Results.  Concurrent  Technologies  generally  met  Circular  A-133  reporting 
requirements  except  that  the  Schedule  of  Expenditures  of  Federal  Awards  included,  but 
did  not  discretely  identify,  awards  which  are  not  subject  to  Circular  A-133  audit 
requirements  (Finding  A).  Grant  Thornton  generally  met  auditing  standards  and  Circular 
A-133  requirements  and  no  additional  work  is  required  for  the  Concurrent  Technologies 
FY  2009  single  audit.  However,  we  identified  performance  and  documentation  issues 
that  need  to  be  addressed  in  future  audits  (Findings  A  and  B). 


1  Auditing  standards  include  both  Government  Auditing  Standards  and  the  American  Institute  of  Certified 
Public  Accountants’  audit  standards. 


Management  Comments  and  DoD  IG  Response.  The  Audit  Partner,  Grant  Thornton,  agreed 
to  take  the  recommended  actions.  Management  comments  were  responsive  and  conform  to 
requirements;  no  additional  comments  are  needed.  Management  comments  are  included  in  their 
entirety  at  the  end  of  this  report. 

Findings 

Finding  A.  Schedule  of  Expenditures  of  Federal  Awards.  Concurrent  Technologies 
did  not  correctly  prepare  the  FY  2009  Schedule  of  Expenditures  of  Federal  Awards  (the 
Schedule)  because  the  Schedule  included  fixed  price  contracts  that  were  not  separately 
identified.  In  addition,  while  the  auditors  performed  audit  procedures  related  to  the  accuracy  and 
completeness  of  the  Schedule  they  failed  to  identify  that  the  Schedule  included  fixed  price 
contracts.  Based  on  our  discussions  with  the  audit  partner,  it  appears  that  these  deficiencies 
occurred  because  neither  the  auditors  nor  Concurrent  Technologies  management  were  aware  that 
fixed  price  contracts  are  not  considered  federal  awards  subject  to  audit  under  Circular  A- 133. 

An  accurate  Schedule  is  necessary  to  enable  auditors  to  correctly  identify  the  awards  subject  to 
the  federal  program  compliance  audit  so  that  sufficient  and  appropriate  audit  evidence  is 
obtained  to  support  audit  conclusions.  We  believe  the  failure  to  discretely  identify  fixed  price 
contracts  contributed  to  the  sampling  deficiency  discussed  in  Finding  B. 

Circular  A- 133  defines  federal  awards  as  federal  financial  assistance  and  cost 
reimbursement  contracts  that  auditees  receive  directly  from  federal  awarding  agencies  or 
indirectly  from  pass-through  entities.  Accordingly,  fixed  price  contracts  are  not  considered 
federal  awards  for  purposes  of  the  Circular  A- 133  audit.  Therefore,  if  fixed  price  contracts  are 
included  in  the  Schedule  they  should  be  discretely  identified  so  that  the  auditor  can  exclude  them 
from  the  sampling  population.  Circular  A- 133  and  the  AICPA  Audit  Guide  “Government 
Auditing  Standards  and  Circular  A- 133  Audits”  provide  the  audit  requirements  and  suggested 
procedures  for  performing  the  review  of  the  Schedule.  The  purpose  of  these  procedures  is  to 
determine  whether  the  Schedule  provides  an  appropriate  basis  for  planning  the  federal  program 
audit.  Therefore,  the  auditors  must  determine  the  accuracy  and  completeness  of  the  Schedule  to 
properly  plan  and  execute  an  adequate  scope  for  the  Circular  A- 133  audit. 

As  a  result  of  our  review,  Concurrent  Technologies  took  corrective  action  on  the 
FY  2010  single  audit  submitted  to  the  Federal  Audit  Clearinghouse  on  March  29,  2011.  The 
FY  2010  Schedule  of  Expenditures  of  Federal  Awards  clearly  and  separately  identifies  the  fixed 
price  contracts.  Concurrent  Technologies’  corrective  actions  are  sufficient  to  address  the 
deficiency.  For  future  audits  Concurrent  Technologies  should  continue  to  separately  identify 
fixed  price  awards  included  in  the  Schedule. 

Finding  B.  Performance  and  Documentation  of  the  Federal  Program  Audit.  Grant 
Thornton  needs  to  improve  the  documentation  of  procedures  perfonned  to  support  the  federal 
program  audit  conclusions  and  needs  to  improve  the  sample  selection  process  in  future  single 
audits.  Specifically,  the  documentation  did  not  provide  details  of  the  procedures  performed  to 
support  the  conclusion  that  subrecipient  monitoring  requirements  were  not  applicable  to 
Concurrent  Technologies’  research  and  development  cluster  awards  and  the  sample  used  for  the 
compliance  testing  of  four  requirements  inappropriately  included  commercial  and  fixed  price 
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contracts  which  are  not  subject  to  audit  under  Circular  A- 133.  In  addition,  the  documentation  of 
the  federal  program  internal  control  review  and  compliance  audit  did  not  always  provide  a  clear 
description  of  audit  procedures  performed  and  evidence  obtained  to  support  the  conclusions  on 
Concurrent  Technologies’  compliance  with  federal  compliance  requirements.  As  a  result,  we 
spent  time  obtaining  additional  verbal  explanations  and  reviewing  additional  documentary 
evidence  to  detennine  whether  there  was  sufficient  evident  to  support  the  audit  conclusions. 

Subrecipient  Monitoring  Compliance  Requirement.  Grant  Thornton 
documentation  did  not  contain  sufficient  details  to  support  their  conclusion  that  the  subrecipient 
monitoring  requirement  was  not  applicable  to  research  and  development  cluster  awards  because 
the  documentation  did  not  include  essential  award  infonnation  needed  to  make  this 
determination.  Because  the  distinction  between  vendor  and  subrecipient  awards  has  a 
significant  impact  on  both  the  auditee  and  auditor  responsibilities,  and  because  approximately  24 
percent  of  Concurrent  Technologies  federal  expenditures  were  for  subawards,  we  re -tested 
awards  to  see  if  we  came  to  the  same  conclusions  as  the  auditors.  Based  on  our  analysis,  we  do 
not  agree  with  the  auditor’s  determination  that  the  subrecipient  monitoring  requirement  was  not 
applicable. 

Circular  A- 133  provides  guidance  for  distinguishing  between  a  subrecipient  and  vendor 
relationship.  The  Compliance  Supplement  Part  5  provides  guidance  specific  to  research  and 
development  awards.  In  general,  for  research  and  development  awards  key  distinctions  between 
a  subrecipient  and  vendor  relationship  are  that:  (1)  subrecipient  funding  is  provided  to  perform  a 
portion  of  the  scope  of  work  or  objective  of  the  pass-through  entity’s  award;  however,  vendor 
payments  are  for  goods  and  services  used  in  the  conduct  of  the  award  but  not  in  directly 
accomplishing  the  award  objective;  and,  (2)  subrecipients  are  responsible  for  adhering  to  federal 
program  compliance  requirements  while  vendors  generally  are  not. 

The  auditors  reviewed  24  subawards  to  evaluate  Concurrent  Technologies'  assertion  that 
all  federal  award  funds  passed-through  to  non-federal  entities  represent  a  vendor  relationship 
rather  than  subrecipient  relationship.  The  review  was  performed  with  Concurrent  Technologies 
program  managers  and  the  documentation  consisted  of  yes/no  detenninations  for  each  award 
against  a  listing  of  subrecipient  and  vendor  characteristics  contained  in  Circular  A- 133.  Based 
on  this  review  Grant  Thornton  accepted  Concurrent  Technologies’  assertion  that  all  subawards 
were  made  to  vendors,  and  therefore  subrecipient  monitoring  requirements  were  not  applicable. 

We  re-tested  five  subawards  reviewed  by  the  auditors  in  order  to  make  a  determination 
on  the  characteristics  of  a  vendor  and  subrecipient  relationship  that  are  identified  above.  We 
reviewed  and  compared  the  award  requirements  for  both  the  Concurrent  Technologies’  award 
and  the  subaward.  Based  on  our  review  of  the  scope  of  work  for  both  the  subaward  and  the 
related  Concurrent  Technologies’  award,  we  found  that  in  all  instances  the  purpose  of  the 
subaward  was  to  carry  out  an  objective  of  the  Concurrent  Technologies’  research  and 
development  award.  We  also  found  that  in  all  instances  the  subaward  entity  was  required  to 
adhere  to  administrative  and  compliance  requirements  flowed  down  from  the  Concurrent 
Technologies’  award.  Therefore,  we  concluded  that  the  subrecipient  monitoring  compliance 
requirements  are  applicable  to  Concurrent  Technologies’  research  and  development  cluster. 
Although  we  performed  sufficient  procedures  to  detennine  that  the  subrecipient  monitoring 
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requirement  was  applicable,  it  was  beyond  the  scope  of  the  quality  control  review  to  perform 
additional  procedures  to  determine  any  further  impact  based  on  how  many  Concurrent 
Technologies'  subawards  met  either  the  subrecipient  or  vendor  criteria.  In  our  opinion,  it  is  in 
the  government’s  best  interests  for  the  auditors  to  review  this  determination  process  in  the  next 
single  audit. 

The  importance  of  appropriately  distinguishing  between  a  subrecipient  and  a  vendor 
relationship  is  significant  because  it  determines  the  degree  of  pass-through  entity  oversight 
responsibilities  and  it  affects  the  auditor's  ability  to  properly  plan  and  execute  an  adequate  scope 
for  the  Circular  A- 133  audit.  In  addition,  if  the  distinction  is  not  properly  made  it  will  negatively 
affect  Concurrent  Technologies’  ability  to  appropriately  comply  with  reporting  requirements 
under  the  Federal  Funding  Accountability  and  Transparency  Act.  This  Act  relates  to  subaward 
reporting  under  grants,  cooperative  agreements  and  contracts  and  became  effective  in  October 
2010.  Therefore,  for  future  audits,  Grant  Thornton  needs  to  perform  procedures  to  determine  the 
adequacy  of  Concurrent  Technologies’  policies  and  procedures  for  distinguishing  between 
subrecipient  and  vendor  awards,  determine  whether  subrecipient  monitoring  requirements  are 
direct  and  material  to  the  research  and  development  program  cluster,  and  plan  and  perform 
further  audit  procedures  as  needed. 

Sampling  Population  for  Federal  Program  Audit.  Grant  Thornton  needs  to 
ensure  that  the  population  used  to  select  samples  for  compliance  testing  in  future  audits  is 
appropriate  for  the  single  audit  objectives.  The  sample  used  to  test  compliance  with  activities 
allowed,  allowable  costs,  cash  management,  and  period  of  availability  for  the  FY  2009  audit 
included  several  transactions  from  commercial  and  fixed  price  contracts.  Commercial  and  fixed 
price  contracts  are  not  subject  to  the  Circular  A- 133  audit  requirements  and  testing  transactions 
from  these  contracts  does  not  provide  appropriate  evidence  for  the  conclusions  on  federal 
program  compliance.  The  inclusion  of  contracts  that  were  not  subject  to  Circular  A-133  audit 
requirements  was  not  material  for  the  FY  2009  audit;  however,  the  improper  inclusion  of 
commercial  and  fixed  price  contracts  in  Circular  A-133  audits  could  become  material  in  the 
future  and  impact  the  sufficiency  of  appropriate  evidence. 

Circular  A-133  defines  federal  awards  as  federal  financial  assistance  and  federal  cost 
reimbursement  contracts  that  the  auditee  receive  directly  from  federal  awarding  agencies  or 
indirectly  from  pass-through  entities.  Accordingly,  fixed  price  and  commercial  contracts  are  not 
considered  federal  awards  for  purposes  of  the  Circular  A-133  audit.  The  American  Institute  of 
Certified  Public  Accountants  audit  standards  on  sampling,  AU  §350.17,  state  that  the  auditor 
should  determine  that  the  population  from  which  the  sample  is  drawn  is  appropriate  for  the 
specific  audit  objective.  Because  fixed  price  and  commercial  contracts  are  not  considered 
federal  awards,  they  cannot  be  used  to  meet  the  objectives  of  the  Circular  A-133  compliance 
audit. 


Working  Paper  Documentation.  Grant  Thornton  needs  to  enhance  the 
documentation  for  the  understanding  of  internal  control  and  the  testing  of  internal  controls  and 
compliance  with  applicable  compliance  requirements  in  future  audits.  The  documentation  for 
the  FY  2009  audit  did  not  include  sufficient  details  to  support  the  auditor's  understanding  of 
internal  control  for  the  activities  allowed,  allowable  cost  principles,  cash  management,  period  of 
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availability,  and  procurement  requirements.  In  addition,  the  documentation  for  the  testing  of 
internal  control  or  compliance  for  allowable  cost  principles,  cash  management,  procurement,  and 
key  personnel  award  provisions  did  not  include  sufficient  details  to  clearly  support  the  audit 
conclusions.  As  a  result,  we  had  to  obtain  additional  documentation  and  verbal  explanations 
from  the  audit  manager  in  order  to  conclude  that  there  was  sufficient  evidence  to  support  the 
audit  conclusions  on  Concurrent  Technologies'  compliance  with  requirements  applicable  to  the 
research  and  development  cluster.  The  specific  details  of  the  documentation  deficiencies  were 
discussed  with  Grant  Thornton  during  the  site  visit. 

Auditing  standards  require  that  audit  documentation  be  appropriately  detailed  to  provide 
a  clear  understanding  of  the  work  performed,  the  evidence  obtained,  and  the  conclusions 
reached.  The  documentation  should  be  in  sufficient  detail  to  enable  an  experienced  auditor  to 
understand  from  the  documentation  the  nature,  timing,  extent,  and  results  of  audit  procedures 
performed  and  the  evidence  that  support  the  auditors’  significant  judgments  and  conclusions. 
Given  the  auditors  were  able  to  provide  verbal  explanations  and  other  audit  documentation  to 
support  the  sufficiency  of  evidence,  our  recommendation  addresses  the  need  for  the  auditors  to 
perfonn  future  actions  to  ensure  the  audit  documentation  complies  with  auditing  standards. 


Recommendation  and  Management  Comments 

We  recommend  that  in  future  Circular  A-133  audits  the  Audit  Partner,  Grant 
Thornton,  LLP: 

1.  Perform  additional  procedures  to  determine  whether  the  Concurrent 
Technologies  Schedule  of  Expenditures  of  Federal  Awards  discretely 
identifies  fixed  price  contracts. 

2.  Perform  audit  procedures  to  determine  the  adequacy  of  Concurrent 
Technologies’  policies  and  procedures  for  distinguishing  between 
subrecipient  and  vendor  awards,  determine  whether  subrecipient  monitoring 
requirements  are  direct  and  material  to  the  research  and  development 
program  cluster,  and  plan  and  perform  further  audit  procedures  as  needed. 

3.  Review  the  sampling  methodology  to  ensure  the  sampling  population  used  is 
appropriate  for  federal  program  compliance  testing. 

4.  Improve  work  paper  documentation  to  include  sufficient  details  to  support 
the  understanding  of  internal  controls  and  the  audit  procedures  performed 
and  evidence  obtained  to  support  conclusions  on  the  review  of  internal 
controls  and  the  compliance  audit  over  allowable  costs/cost  principles;  cash 
management;  procurement,  suspension,  and  debarment;  and  special  tests 
compliance  requirements. 

5.  Provide  the  Department  of  Defense  Office  of  Inspector  General  with  the 
working  paper  documentation  from  the  FY  2011  single  audit  that 
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demonstrates  corrective  actions  taken  to  address  the  deficiencies  related  to 
subrecipient  monitoring,  the  sample  selection  process,  and  working  paper 
documentation  that  were  identified  in  this  quality  control  review. 

Grant  Thornton  Comments.  The  Audit  Partner,  Grant  Thornton,  agreed  to  take  the 
recommended  actions.  Management  comments  are  included  in  their  entirety  at  the  end  of  this 
report. 


We  appreciate  the  courtesies  extended  to  the  audit  staff.  For  additional  information  on 
this  report,  please  contact  Ms.  Carolyn  R.  Davis  at  (703)  604-8877. 


Randolph  R.  Stone,  SES 
Deputy  Inspector  General 
Policy  and  Oversight 
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Appendix  A.  Quality  Control  Review  Process 

Background,  Scope  and  Methodology 

The  Single  Audit  Act,  Public  Law  98-502,  as  amended,  was  enacted  to  improve  the  financial 
management  of  State  and  Local  Governments  and  nonprofit  organizations  by  establishing  a 
unifonn  set  of  auditing  and  reporting  requirements  for  all  federal  award  recipients  required  to 
obtain  a  single  audit.  Circular  A- 133  establishes  policies  that  guide  the  implementation  of  the 
Single  Audit  Act  and  provides  an  administrative  foundation  for  uniform  audit  requirements  of 
non-federal  entities  expending  federal  awards.  Entities  that  expend  $500,000  are  subject  to  the 
Single  Audit  Act  and  the  audit  requirements  in  Circular  A- 133.  Therefore,  they  must  have  an 
annual  single  or  program-specific  audit  performed  under  government  auditing  standards  and 
submit  a  complete  reporting  package  to  the  Federal  Audit  Clearinghouse. 

We  reviewed  the  Grant  Thornton,  LLP  FY  2009  single  audit  of  Concurrent  Technologies 
Corporation  and  the  reporting  package  that  was  submitted  to  the  Federal  Audit  Clearinghouse  on 
September  15,  2009,  using  the  1999  edition  of  the  “Unifonn  Quality  Control  Guide  for  the 
A-133  Audits”  (the  Guide).  The  Guide  applies  to  any  single  audit  that  is  subject  to  the 
requirements  of  OMB  Circular  A-133  and  is  the  approved  President’s  Council  on  Integrity  and 
Efficiency"  checklist  used  for  performing  quality  control  reviews.  We  performed  the  review 
from  August  2010  through  September  2011.  The  review  was  conducted  in  accordance  with  the 
Quality  Standards  for  Inspection  and  Evaluation.  The  review  focused  on  the  following 
qualitative  aspects  of  the  single  audit: 

•  Qualification  of  Auditors, 

•  Independence, 

•  Due  Professional  Care, 

•  Planning  and  Supervision, 

•  Internal  Control  and  Compliance  testing, 

•  Schedule  of  Expenditures  of  Federal  Awards,  and 

•  Data  Collection  Form. 


2  The  President’s  Council  on  Integrity  and  Efficiency  and  the  Executive  Council  on  Integrity  and  Efficiency 
combined  into  the  Council  of  the  Inspectors  General  on  Integrity  and  Efficiency  in  accordance  with  the  Inspector 
General  Reform  Act  of  2008. 
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Prior  Quality  Control  Reviews 

Since  October  1,  2005,  we  have  performed  one  quality  control  review  of  a  Grant  Thornton,  LLP 
Circular  A- 133  audit.  The  quality  control  review  identified  deficiencies  resulting  in  a  similar 
finding  and  recommendation  on  audit  documentation.  Unrestricted  IG  DoD  reports  can  be 
accessed  at  http://www.dodig.osd.mil/audit/reports. 

IG  DoD  Reports 

IG  DoD  Report  No.  D-2008-6-004,  “Report  on  Quality  Control  Review  of  Noblis  Incorporated 
FY  2006  Single  Audit,”  March  31,  2008 
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Appendix  B.  Compliance  Requirements3 


Compliance  Requirements 

Applicable 

Not  Applicable/ 
Not  Material 

Activities  Allowed/Unallowed 

X 

Allowable  Costs/Cost  Principles 

X 

Cash  Management 

X 

Davis-Bacon  Act 

X 

Eligibility 

X 

Equipment  and  Real  Property  Management 

X 

Matching,  Level  of  Effort,  Earmarking 

X 

Period  of  Availability  of  Federal  Funds 

X 

Procurement,  Suspension,  and  Debannent 

X 

Program  Income 

X 

Real  Property  Acquisition  and  Relocation 
Assistance 

X 

Reporting 

X 

Subrecipient  Monitoring 

X 

Special  Tests  and  Provisions 

X 

3  This  chart  reflects  the  auditor’s  determination  on  compliance  requirement  applicability  and  materiality.  As  noted 
in  Finding  B,  the  audit  documentation  did  not  provide  sufficient  detail  to  support  the  auditor’s  conclusion  that  the 
subrecipient  monitoring  requirement  was  not  applicable. 
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October  27.  20 1 ! 


Ms.  Carolyn  IL  Davis 

Assistant  Inspector  General  for  Audit  Policy  and  Oversight 
Office  of  the  Inspector  Genera!.  Department  of  Defense 
-100  Army  Navy  Drive 
Arlington.  VA  22202~47<M 

Dear  Ms.  Davis: 


Audit  •  Tot  •  Advil  or  y 

Grant  Thornton  LLP 

201 G  Cwporate  Ridge  Suite  <t(X) 
Mown,  VA  22102  7838 

1 703.W7.75W 
F  /03848.9S80 
www  GrantThor ntoti.com 


Grant  Thornton  LLP  is  providing  responses  to  the  findings  iti  die  Idler  \ve  received  dated 
September  29,  201 1  with  the  subject  “Report  on  Quality  Control  Review  of  Grant  Thornton, 

I J  I*  I  Y  2009  Single  Audit  of  Concurrent  Technologies  Corporation  (Project  No.  D20I0- 
D1P0AC-O260).  We  have  formatted  this  letter  to  include  your  findings/ comments  followed  by 
our  response. 

Finding  A-Sc/wduIc  vf  Expenditures  of  Federal  Awards 

W  iu it  the  auditon  performed  audit  procedures  related  to  l hr  tnvuiruy  and  completeness  of  the  'uhnin/r  they  jaded 
to  identity  tbo  Schedule  mhuletl fixed  price  nut  nut  r.  Hated  ujm  our  dlti  fissions  noth  tlx  audit  part  on,  it 
appear*  that  these  deficimcio  ocitored  because  neither  the  auditors  nor  Concurrent  T nbuafogju  management 
inert  awun  lh,it  fixed  pnet  amt  men  an  not  awuihxd  federal  uwartls  suhjrit  to  audit  under  Citttditr.  it}), 

•  In  .murat  t  Schedn/t  u  ncniuoy  to  enable  audit  on  to  enmetfy  identify  the  airants  subject  to  federal  piogram 
-  mpbain  t  audit  us  that  sufficient  and  appropnat »•  audit  endeoce  u  obtained  to  support  audit  emutushnu  U  r 
believe  that  failuie  tu  .Jncir/ely  identify  fixed  pine  .nut  nuts  contributed  to  the  samjding  deficiency  discussed  in 
Finding  ft. 

Circular.  1  13)  defines  federal  awards  as federal financial \  assistance  and  .ost  reimbursement  contracts  that 
andttees  ro  eat  directly  from  federal  amirding  agencies  or  indirectly  from  pass-through  entities.  Accordingly, 
fixed  price  contracts  an  not  considered  award*  for  purposes  of  the  Circular  Af  33  audit.  Therefore,  if  fixed 
price  contracts  are  included  in  the  S.hednlt  they  should  be  discretely  identified  so  that  the  auditor  can  exclude 
thou  pom  the  sample  population.  CmularA-133  and  the  AIC.F.-t  Audit  Guide  *' Government  Auditing 
Stundurds  and  Cinu/ar  1-135  .  Aiulits" provide  the  audit  rtqmrtments  and  mggtled prvcetburs for  performing 
the  review  of  the  Schedule.  The  purpose  of  these  procedures  u  m  determine  whether  the  Schedule  prorides  and 
appropriate  hast!  for  planning  the  fide  ml  program  audit.  Therefore,  the  auditors  must  determine  the  accuracy 
and  completeness  of  the  Schedule  to  property  plan  and  execute  an  adtiftmte  nope  for  the  Circular  -1-1)3  audit. 


Response-  \Vc  agreed  with  the  IG  auditor’s  comment  that  a  better  presentation  would  he  to 
separately  identify  the  fixed  price  contracts  on  the  SEP  A.  Beginning  in  fiscal  year  2010. 
Concurrent  Technolopes  Corporation  segregated  fixed  price  contracts  separately  on  the  SETA 
and  we  tested  their  policies  and  procedures  to  ensure  that  such  fixed  price  contracts  were 
appropriately  Identified  and  separated  from  the  cost  reimbursable  contracts  on  the  SEFA. 

The  audit  partner  and  audit  ream  had  a  good  understanding  of  rhe  definition  of  an  award  under 
Circular  A  1 33,  including  the  fact  that  fixed  price  contracts  are  not  subject  to  such  audit 
requirements  Alt  government  a  wan  Is  had  historically  been  included  in  the  Schedule  ot 
Expenditures  of  Federal  Awards  (“SEP A”)  as  a  means  of  agreeing  the  lutal  amount  of 
government  expenditures  in  u  given  year  to  the  Company’s  underlying  Accounting  records 


lirant  Thwnttm  LU> 
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Further,  the  engagement  team  received  a  full  download  ol  the  job  cost  ledger  for  201 W  to 
ensure  that  a  complete  population  of  expenditures  for  all  federal  award*  was  used  for  testing. 
Hus  enabled  the  audit  team  to  ensure  that  all  expenditures  subject  lu  testing  for  both  the 
financial  statement  audit  and  the  single  audit  had  wild  equal  probability  of  be  selected  for 
testing.  Since  the  control  testing  identified  in  the  workpapers  supporting  the  single  audit  also 
provided  support  to  the  financial  statement  audit,  it  was  accepted  that  any  contract  cost 
regardless  of  type  was  selected  for  testing  as  the  control  objective  should  he  met  irrespective  of 
the  nature  of  the  award.  For  efficiency  purposes,  compliance  procedures  were  extended  to  the 
items  selected  for  control  testing. 

binding  13 

Sampling  Population  for  Federal  Program  Audit 

Grant  7  horn  ton  needs  to  ensure  tint!  the  population  used  to  select  samples  for  compliance  testing  in  future  audits 
u  appropnate  Jar  the  single  an, lit  objectives.  The  sample  used  to  test  compliance  with  activities  allowed,  allowable 
costs ,  cash  management,  and  period  of  availability  fin  the  FY  2009  audit  included  scihtuI  transactions  pom 
.nm menial  and fixed  pnee  contracts.  Commercial  and fixed  price  ton  tracts  an t  not  subject  to  the  Circular  A- 
13)  audit  requirements  and  testing  tnuuactious  fwn  these  con tracts  does  not  provide  appropnate  evidence  fur  the 
ambitions  on  fetleml  'program  lomp/iance.  The  in,  bis  tun  of  contracts  th*it  Witt  not  subject  to  Circular  A-1 33 
audit  requirements  mat  not  material  for  the  TV 2009  audit;  hmvetvr,  the  i/nprofser  inclusion  of  t  omnien  ial  and 
fixed  price  cwtlrtnls  m  Ciirnlar.'  I  -1 33  audits  1011/d  become  material  m  the  future  and  impact  the  sufficiency  oj 
appropnate  mile  nee. 

Response- In  future  engagements.  \vc  will  remove  any  sample  items  from  fixed  price  or 
commercial  awards  that  arc  used  to  support  our  financial  statement  audit  from  die  single  audit 
testing  workpapers  to  avoid  any  confusion 

Subrecipient  Monitoring  Compliance  Requirement 

Giant  Thornton  documentation  did  not  contain  tnfficienl  details  to  support  their  conclusion  thief  the  snbncifurnt 
monitoring  ivqimement  urns  not  applicable  to  research  and  development  duster  awards  beulrtre  the  documentation 
did  not  unhide  essential  award  information  needed  to  make  tins  determination,  because  the  distinction  between 
vendor  and  subreapient  awards  has  a  significant  impact  uu  both  the  andifee  and  auditor  responsibilities,  and 
betunse  approximately  21  percent  oj  Concurrent  Technologies  federal  expenditures  were  for  suba wards,  we  tv- 
tested  award*  to  see  if  wt  uime  to  the  came  conclusion*  as  the  unditors,  Bused  on  our  analysis,  W  do  not  ugne 
with  the  auditor's  determination  that  the  tuhredpient  monitoring  requirement  was  not  applicable. 

Cinn/ar  I  /  33  provides  ytidome  for  dhHHgfdifmg  between  a  snbiwipttuf  and  vendor  itlatnnnhifu  7 he 
( * mnpl/unce  Supplement  Fart  f  provides  gtudmut  sptnfn  to  ivsuin  h  and  devttypment  awards,  In  general,  for 
research  and  darfopment  rtnwcts  key  dwtnemns  between  a  utiurcipient  and  vendor  nla  turn  ship  are  that;  ft) 
tnbmtpitnl  funding  u  provided  la  peifatui  a  portion  of  the  scope  of  work  or  objective  of the  pass- through  entity's 
airani;  however,  lendoi  payments  ui\  for  good*  and  terwaj  med  ns  tin  conduct  of  the  awairl  but  mil  nr  dimity 
accomplishing  the  .rward  abjective;  and  (2)  submifututs  are  responsible  (or  adhering  to  federal  program 
>tmtplianct  reqnWrmrnts  while  vendor*  gemralh  art  nut, 

The  mUtOO  removed  2d  iubtmnds  to  nhiltutl*  ( oncnmul  I  tchnologits '  assertion  that  till  federal  award  fund 
pin* cd- through  to  non- federal  entitle /  rtprvtinl  a  vendor  ttla/ionship  ru/hci  than  i/tbin  ipirnt  rr/atinnskip.  P* 
•anew  was  performed  with  Cnmumut  Technologies  progjam  manners  and  the  documentation  an/usted  of 


torn*  rw.iton  UP 

US  rm,im  l.m  4  ar»*'n»Nitin>U«lMiUau«lliJ 


11 


Grant  Thornton 


ft*/ no  detemtuathuj for  each  award  againil  a  ///nun  °J  substetp/esi  lint/  vendu>  cbtnurtensThJ  iW4«W  in 
(.malar  I  f  33.  fUisaf  on  this  it view  Onto/  Thornton  accepted  Cawcumnt  Tednnshjfies  J7Jtrttafi  uU 
wbatotnir  weir  wide  to  nmhrr '  and  i brief  tut  / nlnnifnen f  nmnilonn i»  iNfiitremeut  n*eir  not  applicable, 

ll'V  re-tested  _ five  Milnnr.inh  renewed  by  the  audit  on  in  otdtr  to  make  the  d'tttvn  nation  on  the  (haWteilftM  of 
a  vendor  and  uilnmptent  ix/ationsbip  that  ate  identified  about  ll'V  renteind  and  emnpamt  the  award 
require  nun!/  /or  both  Concurrent  I  eclnioloyes  a  wind  and  the  mb  aton'd  Hated  upon  utir  tmew  of  the  tcofte  oj 
work.  /or  ftoth  the  suhaward  and  (lu  rr/attd  Couatmnf  'Technologies'  awanf,  we  found  that  in  all  instances  the 
ptapn/e  oft  he  inh.nr.nd  ir>u  to  cany  out  an  objeitiue  of  the  Cam  m  rent  I  tcbtndogfes  '  rtseurcb  and  deretapmeui 
. itotrd.  IT  <•  a/so  found  that  in  at/  intlan.es  the  fuLiwaid  entity  mu  la/nhtd  to  ttdhttt  to  adnun/s/nttM  and 
usmphanct  ittfinmucnU  flowed  down  front  the  Cumnnent  Tetfdiotyfii  award  Therefore ,  we  concluded  ttmt  the 
cuhrvJp/ent  monitoring  compliance  m/tuncments  /nr  applicable  to  Cumnrrtut  7  'ctbmlot/jts  *  ivsearyh  and 
dm- top  went  duster.  .  Mtfmijt  we  pafoimed  luffhlent  pm,  educes  to  detemmr  that  the  xufntdpienl  nmtthnvn 
leqnimutul  ton  applicable,  it  tots  beyond  the  scope  off  he  quality  lontftit  Usview  to  pttfonn  additional  pmceduiei 
to  def r  run  nv  any  father  impact  hated  on  how  many  Concurrent  Tixhno/ojp/i  ’  wbawarcL  met  filial  the 
adnviipient  or  vendor  catena.  In  onr  of onion ,  it «  eu  f/or  gmalNMeNt's  he  if  enttmt  for  the  an  Jam  tn  Knew 
this  deterunnaf/on  process  tn  the  next  rmg/c  audit. 

The  impeilanet  0/  appropriately  thitmguishtng  between  a  tubtedpunl  and  a  vendor  n/afionshtp  u  uyiif/aint 
became  if  determine,  the  degree  o  f  pa jj  thnufgp  entity  outfight  rtfpouMiteev  and  a  afpett  thr  auditor  1  ability 
to  property  plan  and  execute  and  adequate  nope  far  the  Cmnhr  I  f  33  audit.  In  addition,  1/  the  distinction  1 1 
nnt  properly  m,nh  it  wtH  negUhaty  affttl  Con  ament  Ttdmofabf  ability  to  appropriately  comply  noth  nportiHg 
requirement/  nil, hr  the  Federal  lyindwe  iicuuntabi/tty  and  Tn/nipairncy  hi.  Tp e  7*7  whites  to  > nhmnd 
reporting  untkr  (rant i.  cooperative  ayeewenh  and  cam ra.tr  and  became  effective  in  October  2010.  Theerfoiv. 
for  future  audits.  Grunt  Thornton  Needs  to  perform  pmeedum  to  determine  th  adequacy  of  ContnnfM 
TeJnw/oyeT po/icter  and pwcrdurti  fir  du/ingmhin/,  iw/nren  snlneitpltnt  and  vendor  awanit,  determine 
whether  mhei/ptesit  mnnihnvig  ivqnnvmenh  air  duvet  and  material  to  the  ineanh  and  devttopNHUt  i/tUter.  and 
plate  and peiform  further  audit  ptmmbnvi  ,u  needed. 

Response-  Wc  understand  the  ICi  auditors  comment  and  will  enhance  our  documentation  to 
support  the  conclusion  as  to  whether  the  entity  being  reviewed  is  4  vendor  or  subrccipient,  We 
will  test  Concurrent  Technologies  Corporation’s  policies  and  procedures  to  determine  if  they 
are  adequate  to  distinguish  between  vendors  and  sub  recipients,  and  that  they  adequately  ensure 
that  such  subrccipients  arc  appropriately  monitored. 

Sampling  Population  for  Federal  program  Audit 

Grant  Thornton  needs  to  ensure  tins!  the  popnhtion  used  to  select  samples  for  compliance  luting  w  fitun  audit 1 
u  appropriate  fen •  the  single  audit  objectives.  The  stimpk  used  to  test  compliance  with  uittntks  <(//oW,  a/lotoih/e 
costs,  cash  management  and  period  of  amiability  for  l7)’  2009  audit  tnilndcd  seierul  transactions  fiom 
comment,//  and fixed  price  contracts.  Commercial  and fixed  price  centtructs  am  not  subject  to  the  C  Mxular  I 
131  audit  requirements  and  testing  Imasantme  fiom  these  contracts  doe s  nnt  provide  apprupnate  emlemv  Jor  the 
conclusions  on  federal  fnvgpaw  >omp/tance.  ’ The  inclusion  from  contracts  that  weir  not  subject  to  (  titular  1- 
133  audit  sequin weuts  w,n  not  matenai  for  the  l:Y  2009  audit;  however,  the  improper  inefuston  of  co/mnertial 
and  fixed  price  izsntnuts  tn  Cnr/ihr  1  133  audits  could  become  material  IN  the  'future  and  smpad  list 
•uffitiemy  oj  appivpna/e  srnfen,, 

Circular  l  1 33  dejines  federal  awards  as  federal financial  assistance  and Jtdtml  tost  reimbursement  contracts 
that  the ,  unit  hr  menu  directly  from  federal  awarding  agencies  or  indirectly  from  ptics-lhmugb  entities. 

Ucordiugty,  fixed  psice  and  commercial  contract /  air  not  considered  federal  awards  Jm  purposes  of  the  (jnnbn 

1-/ 33  audit.  The  Imerhu st  f intitule  «/  Certified  Publu  \cumutants  audit  standirds  on  Sampling,  1C 
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150.17,  state  that  the  auditor  should  detenu  tur  l lull  the  population  Jram  winch  I  lx  sample  /.r  drawn  /.* 
appwpna/efor  /lx  sfxajh  objective.  Beam.'*  fixe d prut  and  commercial  contracts  are  no!  considered  federal 
awards.  they  can  no/  he  used  la  meet  the  objectives  of  tlx  l  ana  far  .1131  lOmplhtMt  audit. 

RcKponttc-ln  future  engagements,  wc  will  remove  uny  snmplc  item*  from  fixed  price  or 
■  ommerrtal  award*  that  arc  used  tu  support  our  financial  statement  audit  frotn  the  tingle  audit 
ICdUllg  workpapers  to  avoid  any  contusion 

Working  Paper  Documentation 

Grunt  Thornton  needs  to  enhance  the  documenta/iou  fin  the  underslandtn £  of  internal  control  and  testing  oj 
internal  controls  am!  compliance  noth  applicable  >omp/iance  nefunxments  in  future  audits.  7  he  doiumentutio/t 
for  tht  t')  2009  audit  did  not  unhide  sufficient  details  to  support  tlx  auditors  understanding  of  infernal  control 
for  the  acidities  allowed,  a/lomibl*  cos!  principles,  cash  management,  period  of  amiability  and  pmurement 
reefnmments.  In  addition,  the  dnuinienlatusn  Jor  the  testing  of  internal  control  or  compliance  for  allowable  cost 
principles,  *Ujh  management,  pmurement,  and  key  personnel  award  provisions  did  not  unhide  sufficient  details 
la  dearly  suppor!  tlx  audit  »t inclusions .  Jj  a  rvsnft .  ox  had  tu  obtain  additional  documentation  and  verbal 
explanations  from  the  audit  manager  in  order  In  conclude  /fait  their  urns  snjjitienf  evidence  to  support  the  audit 
conclusions  on  (fanout  ted mo  logics  ’  uuophautr  with  nqiUmments  applicable  to  the  research  and  dervhipment 
duster  The  spectfu  details  of  the  .iuiumeutution  deficiencies  wen  discussed  with  Grant  Thornton  dining  the  site 
vistk 

Inditing  s/andards  ret/unr  If  ml  the  audit  documentation  be  appivprralely  detailed  to  ptvvide  a  cleat 
understanding  of  the  work  performed,  the  evidence  obtained,  and  the  conclusions  reached.  Tlx  document  at  urn 
•hot i hi  be  in  juf/iuenf  detail  In  enable  an  experienced  auditor  to  nutlet  stand  pom  the  documentation  the  natwx, 
t lining,  extent  and  results  of  audit  procedures  performed  and  the  evidence  that  jnpfttnl  the  auditors  '  significant 
judgments  and  it inclusions.  Given  the  audit  nr :»  were  able  to  provide  verbal  explanations  and  other  documentation 
to  support  th  sufficiency  of  evidence,  our  recommendation  addresses  tlx  need  for  the  auditors  to  perform  future 
actions  to  ensure  tlx  audit  documentation  complies  with  auditing  stand, inis. 

Response-  /Vs  noted  in  your  finding,  wc  provided  the  IG  auditor  a  narrative  documentation 
from  our  permanent  files  to  further  support  our  understanding  of  Concurrent  Technologies 
internal  controls.  In  ihc  situations  where  process  and  control  descriptions  were  genera!,  more 
details  were  subsequently  added.  We  will  also  enhance  our  documentation  to  support  die 
conclusions  reached  for  testing  the  applicable  compliance  requirements. 

Since  the  PY  201 1  single  audit  was  completed  prior  tile  receipt  of  your  letter.  Wc  will  make  our 
FY2QI2  single  audit  workpapers  available  lo  you  to  demonstrate  the  corrective  actions  taken  to 
address  all  of  die  matters  noted  above. 
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